Merge pull request #13 from liamg/liamg-multiple-custom-headers

Allow specifying -H multiple times
liamg · Jul 16, 2020 · 87620d6 · 87620d6
2 parents d05d1ed + 160887b
commit 87620d6
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 8 deletions.
diff --git a/cmd/scout/url.go b/cmd/scout/url.go
@@ -18,7 +18,7 @@ import (
 
 var statusCodes []string
 var filename string
-var header string
+var headers []string
 var extensions = []string{"php", "htm", "html", "txt"}
 var enableSpidering bool
 
@@ -72,7 +72,7 @@ var urlCmd = &cobra.Command{
 			scan.WithExtensions(extensions),
 			scan.WithFilename(filename),
 			scan.WithSkipSSLVerification(skipSSLVerification),
-			scan.WithExtraHeader(header),
+			scan.WithExtraHeaders(headers),
 			scan.WithSpidering(enableSpidering),
 		}
 
@@ -179,7 +179,7 @@ func init() {
 	urlCmd.Flags().StringVarP(&filename, "filename", "f", filename, "Filename to seek in the directory being searched. Useful when all directories report 404 status.")
 	urlCmd.Flags().StringSliceVarP(&statusCodes, "status-codes", "c", statusCodes, "HTTP status codes which indicate a positive find.")
 	urlCmd.Flags().StringSliceVarP(&extensions, "extensions", "x", extensions, "File extensions to detect.")
-	urlCmd.Flags().StringVarP(&header, "header", "H", header, "Extra header to send with requests.")
+	urlCmd.Flags().StringSliceVarP(&headers, "header", "H", headers, "Extra header to send with requests (can be specified multiple times).")
 	urlCmd.Flags().BoolVarP(&enableSpidering, "spider", "s", enableSpidering, "Spider links within page content")
 
 	rootCmd.AddCommand(urlCmd)

diff --git a/pkg/scan/url_options.go b/pkg/scan/url_options.go
@@ -81,9 +81,9 @@ func WithBackupExtensions(backupExtensions []string) URLOption {
 	}
 }
 
-func WithExtraHeader(header string) URLOption {
+func WithExtraHeaders(headers []string) URLOption {
 	return func(s *URLScanner) {
-		s.extraHeader = header
+		s.extraHeaders = append(s.extraHeaders, headers...)
 	}
 }
 

diff --git a/pkg/scan/url_scanner.go b/pkg/scan/url_scanner.go
@@ -35,7 +35,7 @@ type URLScanner struct {
 	filename            string
 	skipSSLVerification bool
 	backupExtensions    []string
-	extraHeader         string
+	extraHeaders        []string
 	enableSpidering     bool
 	checked             map[string]struct{}
 	checkMutex          sync.Mutex
@@ -269,8 +269,8 @@ func (scanner *URLScanner) checkURL(job URLJob) *URLResult {
 			return err
 		}
 
-		if scanner.extraHeader != "" {
-			parts := strings.SplitN(scanner.extraHeader, ":", 2)
+		for _, header := range scanner.extraHeaders {
+			parts := strings.SplitN(header, ":", 2)
 			if len(parts) == 2 {
 				req.Header.Set(parts[0], strings.TrimPrefix(parts[1], " "))
 			}